Security · Infrastructure · Automation · AI
Security · Infrastructure · Automation · AI
The Cyber Resilience Act (CRA) comes into effect on 11 September 2026, mandating manufacturers to report exploited vulnerabilities and severe product-security incidents within specified timeframes. Initial obligations begin immediately, despite broader compliance deadlines in December 2027. Companies must establish effective reporting processes to ensure timely and accurate notifications regarding product security.
A cyberattack against Romania’s land and cadastre agency disrupted national property services. The incident shows why recovery must restore legal confidence as well as technical availability. Romania’s National Agency for Cadastre and Land Registration, ANCPI, suffered a major cyberattack on…
Poland’s amended National Cybersecurity System Act is now in force. Its scale, registration timetable and management duties turn NIS2 into a board-level implementation programme. Poland’s amendment to the National Cybersecurity System Act took effect on 3 April 2026. The Act…
The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.
The EU AI Act's phased application reached a significant milestone on 2 August 2026, with new transparency obligations enforced. While high-risk rules have extended deadlines, organisations must remain proactive in governance, ensuring AI literacy and accountability. Compliance should not hinder innovation, as effective inventory management aids both.
The Data (Use and Access) Act 2025 did not sweep away the UK’s privacy framework. It changed how parts of that framework operate—and added complaint, research, digital-verification and smart-data provisions around it. The Act received Royal Assent on 19 June…
Luxembourg’s national DSA law turned the Competition Authority’s coordinating role into an enforceable procedure, with information requests, inspections and penalties for intermediary-service providers established in the country. The EU Digital Services Act became generally applicable on 17 February 2024, and…
The European Health Data Space creates infrastructure and governance for exchanging and reusing health data. It entered into force in March 2025, but most operational duties arrive through a long, staged implementation. Regulation (EU) 2025/327 entered into force on 26…
The Online Safety Act is no longer a future policy argument. Since March 2025, regulated services have had to turn risk assessments into operating controls. On 17 March 2025, the next phase of the United Kingdom’s Online Safety Act took…
The European Commission's action plan, launched in January 2025, aims to enhance cybersecurity in hospitals and healthcare providers, recognising its vital role in patient safety. The plan focuses on prevention, detection, response, recovery, and deterrence, providing guidance and resources tailored to the sector's unique needs, while integrating existing regulations like GDPR and NIS2.